Back to Home
GerritCodeReview icon

gerrit-mcp-server

Verified Safe

by GerritCodeReview

Overview

This server allows a language model (like Gemini) to query, retrieve details, and manage code reviews within the Gerrit system.

Installation

Run Command
./.venv/bin/uvicorn gerrit_mcp_server.main:app --host localhost --port 6322

Environment Variables

  • GERRIT_CONFIG_PATH
  • GERRIT_BASE_URL
  • PYTHONPATH

Security Notes

The server primarily interacts with Gerrit via `curl` commands. The `run_curl` function uses `asyncio.create_subprocess_exec` with a list of arguments, which mitigates shell injection risks. Input parameters for Gerrit queries are URL-quoted. Authentication details (username, auth_token, gitcookies_path) are stored in `gerrit_config.json`, which must be secured by the user. The `server.log` could expose executed commands and responses, requiring local filesystem security. Overall, the approach to command execution is robust against common injection vectors, but secure handling of the configuration file is critical.

Similar Servers

Stats

Interest Score30
Security Score8
Cost ClassMedium
Avg Tokens750
Stars2
Forks3
Last Update2026-01-08

Tags

GerritCode ReviewLanguage Model IntegrationDevOpsSource Code Management